2dfb2fead549101a89c0e6b8c151b040_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dfb2fead549101a89c0e6b8c151b040_NEIKI
Size

1008KB
MD5

2dfb2fead549101a89c0e6b8c151b040
SHA1

cca4354517d2d4c10660c6b12fc4bc55ec78da92
SHA256

9fecdc0aac8e1a453d3c871b9047f4ad207871b02d40c80a1d4b6084a8aa170c
SHA512

ec4d7900a4b244b7b2df7e6bf8f556645e00ca457a377ddb62e0bd7d8d370c59272fae2d8fb57287988e7f1a37355e3dc9d2322869cbd1145f9800d106bdfcf8
SSDEEP

6144:X/U++lj6Eqj2xtZQFyccL4OQWWTWqa5ugEfzzXW5k6a+kPXz7DQB2oATOr+K50lq:M+qkVe581wzKzqaawvTaH7hdAFU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dfb2fead549101a89c0e6b8c151b040_NEIKI

Files

2dfb2fead549101a89c0e6b8c151b040_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\mjohnson\Documents\Visual Studio 2012\Projects\HighSinV\HighSinV\obj\Debug\HighSinV.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 980KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ